Hi,
We have 10 Desktop Engineers, Everybody having Domain Admin right. Because, daily they need to join/dis-join desktop/Laptop PC's to Domain.
Is there anyway i can restrict these engineers to only do join/dis-join and nothing else.I don't want to give any other rights, because we know that domain admin can do anything in Domain.
We are using Windows Server 2008 R2. Clients XP and window7
